Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
File:                     tjLcSuU6XipZtVv1qsfBSRDBTRY.mft (raw, json)
Hash identifier:          Az3usfMkL+1MF9jfuzjizYrpiNUwL6FJRRlG60CBS14=
Subject key identifier:   8B:F1:A2:0C:DB:2E:58:69:88:F7:15:59:31:42:F8:EA:BB:53:70:3D
Authority key identifier: B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16
Certificate issuer:       /CN=F3616D6FAF/serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
Certificate serial:       0968
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
Manifest number:          0968
Signing time:             Sun 25 Oct 2026 01:48:15 +0000
Manifest this update:     Sun 25 Oct 2026 01:48:15 +0000
Manifest next update:     Tue 27 Oct 2026 01:48:15 +0000
Files and hashes:         1: tjLcSuU6XipZtVv1qsfBSRDBTRY.crl (hash: MZISEtpS1vo+AnVdaX9uZkQSlwvicUXNILHI3q7rtXw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408 (0x968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616D6FAF, serialNumber=B632DC4AE53A5E2A59B55BF5AAC7C14910C14D16
        Validity
            Not Before: Oct 25 01:48:15 2026 GMT
            Not After : Oct 27 01:48:15 2026 GMT
        Subject: CN=6add5fdf-4467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:dc:0b:9d:73:17:ec:83:95:24:20:43:28:
                    03:af:ce:f8:db:50:f6:62:5c:70:d6:f8:28:62:c3:
                    a7:32:72:50:af:01:dd:01:2f:e8:87:2e:9f:74:25:
                    8f:ce:18:cd:be:c5:d8:e5:de:d8:8b:59:c9:68:f9:
                    52:a0:87:ba:7b:f6:d1:20:fe:20:a3:84:65:3e:62:
                    8b:ad:73:5f:7c:fe:e2:18:7b:3d:24:b8:01:ee:3a:
                    11:90:02:99:93:d5:a6:74:06:ec:95:bb:47:a6:63:
                    65:30:32:be:c3:94:41:d2:56:1c:68:49:1e:03:08:
                    ae:f8:82:78:3f:e9:22:37:4e:b6:ef:e5:f9:f5:be:
                    83:b8:cd:26:17:1c:da:15:96:9a:d0:2b:91:9a:3e:
                    6d:7c:a2:88:2c:29:82:60:e8:25:ad:cd:77:30:87:
                    c2:0a:1e:77:6b:9c:be:b3:fc:6a:04:b9:26:b8:a4:
                    7d:ff:48:bd:91:8f:0c:4f:66:ca:a1:a8:3f:b9:39:
                    98:46:83:b5:40:24:bd:3b:93:52:50:ee:a4:24:bf:
                    59:9c:9f:a1:0e:11:f7:b6:1e:0f:f1:ad:93:ce:d9:
                    3b:48:d3:4f:75:a5:71:83:ff:6f:fd:f3:c3:72:79:
                    2a:2b:e7:ff:4e:4b:38:06:17:bb:a0:40:b6:c0:2d:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F1:A2:0C:DB:2E:58:69:88:F7:15:59:31:42:F8:EA:BB:53:70:3D
            X509v3 Authority Key Identifier:
                keyid:B6:32:DC:4A:E5:3A:5E:2A:59:B5:5B:F5:AA:C7:C1:49:10:C1:4D:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tjLcSuU6XipZtVv1qsfBSRDBTRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616D6F/3799EC8493A211EAB92C0B6BF8AEA228/tjLcSuU6XipZtVv1qsfBSRDBTRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:19:38:0c:93:d9:7b:b7:92:74:12:16:e9:5e:8a:87:d3:61:
         7a:00:86:d9:7c:20:14:cf:bc:51:cb:84:4e:d9:54:46:3a:c2:
         69:2a:b6:09:0b:3f:52:3b:6d:dc:2a:96:a6:87:c3:a9:e5:48:
         be:95:05:37:9a:b1:d8:79:75:38:7d:c8:e0:f5:2c:6c:22:79:
         41:9a:6d:23:e4:5e:e9:e4:8e:74:9b:db:8c:2b:3f:e2:b6:dd:
         2f:eb:0a:c6:fd:09:09:26:d1:40:a4:ef:c9:aa:02:67:3c:dc:
         62:2d:3f:ce:7d:84:f2:e9:b2:d8:6c:55:46:81:3c:0c:00:c2:
         42:dd:6c:14:7b:e2:ba:89:b5:b5:56:6d:aa:25:40:cf:7a:4f:
         a1:d6:b0:bb:0d:5d:be:be:73:11:d6:67:c1:4d:48:e1:ec:af:
         c5:be:21:96:79:1f:5f:3b:c1:82:93:e4:c3:e7:79:bf:37:7b:
         7a:b7:27:79:0d:ba:f8:90:21:51:8d:81:d6:40:ff:b6:25:89:
         81:d7:f8:2f:24:cf:56:8d:b2:14:5d:73:f7:52:78:ca:cb:15:
         63:2c:b7:23:df:46:d7:68:92:97:cf:37:9e:4f:cb:1a:df:c2:
         53:7d:e1:2b:ed:85:7b:09:0a:f9:ea:b9:c3:b2:c5:52:9a:c2:
         e4:6a:2b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----